<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-26T22:35:00.501565+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44755d13-887a-42f9-86c8-08f58b13b2b5/export</id>
    <title>44755d13-887a-42f9-86c8-08f58b13b2b5</title>
    <updated>2026-08-26T22:35:00.526737+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44755d13-887a-42f9-86c8-08f58b13b2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwrbaj4ti24", "content": "CVE-2026-78570 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into gaining full admin rights on your site. This means an attacker could change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T21:30:06.195529Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44755d13-887a-42f9-86c8-08f58b13b2b5/export"/>
    <published>2026-08-25T21:30:06.195529+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2872c671-969c-43df-b226-3666bb91d0cd/export</id>
    <title>2872c671-969c-43df-b226-3666bb91d0cd</title>
    <updated>2026-08-26T22:35:00.528717+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2872c671-969c-43df-b226-3666bb91d0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvrt57gtb2j", "content": "\ud83d\udea8 CVE-2026-78570 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78570\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T12:07:27.164270Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2872c671-969c-43df-b226-3666bb91d0cd/export"/>
    <published>2026-08-25T12:07:27.164270+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c/export</id>
    <title>5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c</title>
    <updated>2026-08-26T22:35:00.528862+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvmfnixbs2y", "content": "CRITICAL: KlbTheme Total Donations &amp;lt;=2.0.5 allows unauthenticated privilege escalation (CVE-2026-78570). No patch available \u2014 remove or disable plugin to reduce risk. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 ...", "creation_timestamp": "2026-08-25T10:30:26.797323Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c/export"/>
    <published>2026-08-25T10:30:26.797323+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09815151-aaf8-4a16-8617-c0aa79f08662/export</id>
    <title>09815151-aaf8-4a16-8617-c0aa79f08662</title>
    <updated>2026-08-26T22:35:00.528974+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "09815151-aaf8-4a16-8617-c0aa79f08662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155680980822160", "content": "KlbTheme Total Donations &amp;lt;=2.0.5 has a CRITICAL privilege escalation vuln (CVE-2026-78570, CVSS 9.8). Unauthenticated attackers can gain admin access. No patch yet \u2014 disable/remove plugin &amp;amp; monitor for advisories. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 #OffSeq #WordPress #CVE #Vuln", "creation_timestamp": "2026-08-25T10:30:24.560245Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09815151-aaf8-4a16-8617-c0aa79f08662/export"/>
    <published>2026-08-25T10:30:24.560245+00:00</published>
  </entry>
</feed>
